Privacy Policy Vivaspin Casino

Privacy at Vivaspin Casino isn't a tick on a list. On this page we explain which data we process on vivaspins.org, for which purpose, how long we keep it and which rights you have as a visitor.

1. About this website

vivaspins.org is an editorial affiliate site publishing reviews, comparisons and offers from online casinos. We do not offer gambling ourselves and hold no player accounts. If you click a referral to an external casino, you leave vivaspins.org and from that moment fall under that operator's privacy policy.

2. Which data do we process?

We don't ask for personal data such as name, address or phone number. On vivaspins.org you don't need to create an account or fill in forms with personal information. The data we do process arise automatically once you visit the site: technical and analytical data points.

Specifically: your anonymised IP address, browser type, operating system, pages visited, session duration and traffic source. We use this information solely to improve the site and analyse visitor flows.

3. Legal basis

Processing technical data relies on our legitimate interest: the site must work, be secure and be able to improve. For non-essential cookies we ask consent upfront via the cookie banner. You can withdraw consent at any time via your cookie preferences.

Legitimate interest means we balance our interest in running the site against your right to privacy. We don't capture directly identifying data, don't resell data and keep retention periods short. Consent is requested for analytical, functional and marketing cookies; for strictly necessary cookies consent is not legally required.

4. Cookies

We use cookies to operate the site and analyse usage. There are three main types: necessary (basic functionality), analytical (behavioural insight) and functional (preference memory).

For full information see our cookie policy, with an overview of all types and retention periods.

5. Web analytics

We use a web analytics tool to see how visitors use vivaspins.org. The tool gathers anonymised data on page views, click behaviour and traffic sources. Purpose: improve our content and navigation.

Analytical data is not linked to individuals and not shared with third parties for commercial purposes. Retention: maximum 26 months, after which automatic deletion follows.

6. External links

Our pages contain links to external casino websites. When you click them you leave vivaspins.org. We are not responsible for those sites' privacy policy or content. Always read a third party's privacy policy before leaving personal information.

7. Affiliate relationships

vivaspins.org receives commissions when a visitor opens an account at a recommended operator via our referral. Our reviews are not driven by this; we aim for factual information. Tracking happens via cookies and unique referral codes and does not touch personal data.

8. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. vivaspins.org runs over TLS/SSL encryption and is hosted with providers meeting strict security standards.

9. Retention periods

Technical log files are kept up to 90 days for security and analysis. Analytical data up to 26 months. Cookie data in line with the periods in the cookie policy. After that, deletion or anonymisation follows.

Specific processing may have shorter periods. Affiliate-link click behaviour is kept 30 days, enough to validate the referral but too short to build a usage profile. Server error logs are anonymised or deleted after 14 days unless needed for an ongoing incident investigation.

After the retention period, data is deleted or anonymised automatically. Anonymisation means the data can no longer be traced to an individual, even by combining with other sources.

9b. Transfers outside the UK/EEA

Some of the services we use (such as analytics and affiliate platforms) run on infrastructure outside the European Economic Area. For those transfers we use the EU Commission's Standard Contractual Clauses or comparable safeguards, keeping the protection level equivalent.

Where possible we choose providers that process data within the EU/UK or offer EU-only options. Processors operating under a US or other foreign jurisdiction are only used if they can provide certifications legitimising the international transfer.

10. Your rights

As a visitor of vivaspins.org you have the following rights:

  • Access to which data we process about you
  • Correction of incorrect data
  • Erasure of your data
  • Objection to processing
  • Withdrawal of your cookie consent
  • Complaint to a supervisory authority

To exercise a right, email the address below. We respond within 30 days.

11. Minors

vivaspins.org is not intended for people under 18. We don't knowingly collect data from minors. Gambling is only permitted for those aged 18+. If you are younger, don't visit the site.

12. Changes

We may amend this privacy policy. Changes appear on this page with a new date. Substantial changes are also announced via the homepage. Check this policy periodically.

13. Contact

Questions or a request to exercise your rights? Email support@vivaspins.org. Response time within five working days. For urgent matters, put "Privacy" in the subject.

14. Explanation of your rights

The right of access means you can request an overview of the data we process about you. We send it within 30 days in a structured, machine-readable format. The request is free unless manifestly unfounded or excessive.

The right to correction covers incorrect or incomplete data. The right to erasure ("right to be forgotten") applies when processing is no longer needed or you withdraw consent. For processing based on legal obligations this right is limited.

You also have rights to restriction of processing, data portability and to object to specific processing. Finally you can lodge a complaint with the ICO. We'd appreciate you raising it with us first so we can try to resolve it together.

15. Processors and sub-processors

For specific tasks we engage processors: hosting, analytics, mailing and the affiliate platform. With each processor we sign a processing agreement setting out nature, purposes and retention periods. The processor may not use the data for its own purposes.

Sub-processors are used only where strictly necessary and always under the same or stricter conditions. An up-to-date list of processor categories is available on request via support@vivaspins.org.

16. Data breaches

Should a data breach involving personal data occur, we act per our breach procedure. Within 72 hours of discovery we report it to the ICO. Where there is high risk to data subjects, they are informed directly.

At the same time we take immediate mitigating action: close the breach, find the cause and limit consequences where possible. A post-incident review prevents similar issues in future.

Last updated: April 2026